An Alternative to Risk Management for Information and Software Security

February 3, 2009
Featuring Brian Chess and Julia Allen

Download:
full conversation (25:52)

• Why Risk Management is a Poor Foundation for Security (8:24)
• Learning from Other Disciplines: Standards, Compliance, and Process (10:26)
• A Case in Point: Examine Your Environment (7:08)

Additional Materials
Show Notes
Transcript(pdf)

Related Course: Assessing Information Security Risk Using the OCTAVE Approach